@seasonkoh/webaz 0.1.28 → 0.1.30

package/dist/pwa/routes/direct-pay-pending-accept.js

@@ -0,0 +1,222 @@
+import { transition } from '../../layer0-foundation/L0-2-state-machine/engine.js';
+import { restorePreShipDirectPayStock } from '../../direct-pay-stock.js';
+import { createNotification } from '../../layer2-business/L2-6-notifications/notification-engine.js';
+import { dbOne, dbRun } from '../../layer0-foundation/L0-1-database/db.js';
+import { toUnits, toDecimal } from '../../money.js';
+import { buildPayableSnapshot } from '../../direct-pay-create.js';
+import { safeRunDirectPayAmlMonitor } from '../../direct-pay-aml-monitor.js';
+import { updateSnapshotShippingQuote } from '../../trade-terms.js'; // S0:询价确认后补记条款快照 shipping 槽(quote_pending→quote,fail-soft)
+export function registerDirectPayPendingAcceptRoutes(app, deps) {
+    const { db, auth, errorRes, getProtocolParam } = deps;
+    async function loadPendingOrder(req, res) {
+        const order = await dbOne('SELECT id, buyer_id, seller_id, status, payment_rail, product_id, quantity, total_amount, shipping_quote_required, shipping_quote_fee, shipping_quote_est_days, direct_pay_per_tx_cap_units_snapshot, direct_pay_account_snapshot FROM orders WHERE id = ?', [req.params.id]);
+        if (!order) {
+            errorRes(res, 404, 'ORDER_NOT_FOUND', '订单不存在');
+            return null;
+        }
+        if (order.payment_rail !== 'direct_p2p') {
+            errorRes(res, 409, 'NOT_DIRECT_PAY', '仅直付订单有待接单阶段');
+            return null;
+        }
+        if (order.status !== 'pending_accept') {
+            errorRes(res, 409, 'NOT_PENDING_ACCEPT', `当前状态 ${order.status},不在待接单阶段`);
+            return null;
+        }
+        return order;
+    }
+    const notify = (userId, orderId, type, title, body, tpl) => {
+        try {
+            createNotification(db, userId, orderId, type, title, body, tpl);
+        }
+        catch { /* 通知失败不阻断 */ }
+    };
+    // ── 接单模式设置(卖家):店铺默认 + 单品覆盖。值 ∈ {'auto','manual',null=清除(单品回落店铺默认/店铺回落 auto)}。
+    //   只影响【之后】的新订单(下单时快照);对两轨生效(escrow 'auto'=付款后系统自动接单;dp 'manual'=先进 pending_accept)。
+    const MODE_OK = (v) => v === null || v === 'auto' || v === 'manual';
+    app.post('/api/seller/accept-mode', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        if (user.role !== 'seller')
+            return void errorRes(res, 403, 'SELLER_ONLY', '仅卖家可设置接单模式');
+        const b = req.body || {};
+        const touched = {};
+        if ('store_accept_mode' in b) {
+            if (!MODE_OK(b.store_accept_mode))
+                return void errorRes(res, 400, 'BAD_ACCEPT_MODE', "store_accept_mode 只允许 'auto'|'manual'|null");
+            await dbRun('UPDATE users SET store_accept_mode = ? WHERE id = ?', [b.store_accept_mode, user.id]);
+            touched.store_accept_mode = b.store_accept_mode;
+        }
+        if ('product_id' in b || 'accept_mode' in b) {
+            if (!b.product_id)
+                return void errorRes(res, 400, 'MISSING_PRODUCT_ID', '设置单品接单模式须带 product_id');
+            if (!MODE_OK(b.accept_mode))
+                return void errorRes(res, 400, 'BAD_ACCEPT_MODE', "accept_mode 只允许 'auto'|'manual'|null");
+            const p = await dbOne('SELECT seller_id FROM products WHERE id = ?', [b.product_id]);
+            if (!p)
+                return void errorRes(res, 404, 'PRODUCT_NOT_FOUND', '商品不存在');
+            if (p.seller_id !== user.id)
+                return void errorRes(res, 403, 'NOT_PRODUCT_OWNER', '只能设置自己商品的接单模式');
+            await dbRun('UPDATE products SET accept_mode = ? WHERE id = ?', [b.accept_mode, b.product_id]);
+            touched.product_accept_mode = b.accept_mode;
+        }
+        if (Object.keys(touched).length === 0)
+            return void errorRes(res, 400, 'NOTHING_TO_SET', '未提供任何设置项');
+        return void res.json({ success: true, ...touched });
+    });
+    // 卖家确认接单 → 开付款窗口(deadline 此刻起表;收款信息此刻起买家可见 —— orders-read 状态门放行)
+    app.post('/api/orders/:id/pending-accept/accept', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const order = await loadPendingOrder(req, res);
+        if (!order)
+            return;
+        if (order.seller_id !== user.id)
+            return void errorRes(res, 403, 'NOT_ORDER_SELLER', '只有订单卖家可接单');
+        // 询价单不可裸接单(会绕过报价 → 无运费进付款窗):必须 quote → 买家 confirm-quote(PR-3)
+        if (Number(order.shipping_quote_required) === 1)
+            return void errorRes(res, 409, 'QUOTE_REQUIRED', '本单收货地区在运费模板外,请先报价(运费+时效),买家确认后自动进入付款');
+        const windowHours = Math.max(1, Number(getProtocolParam('direct_pay.payment_window_hours', 4)) || 4);
+        try {
+            db.transaction(() => {
+                const t = transition(db, order.id, 'direct_pay_window', user.id, [], '卖家确认接单 → 进入直付付款窗口');
+                if (!t.success)
+                    throw new Error(t.error || 'TRANSITION_FAILED');
+                db.prepare('UPDATE orders SET direct_pay_window_deadline = ? WHERE id = ?')
+                    .run(new Date(Date.now() + windowHours * 3600_000).toISOString(), order.id);
+            })();
+        }
+        catch (e) {
+            return void errorRes(res, 409, 'ACCEPT_FAILED', e.message);
+        }
+        notify(order.buyer_id, order.id, 'direct_pay_accepted_by_seller', '✅ 卖家已确认接单,请付款', `卖家已确认可发货并接单。请在 ${windowHours} 小时内完成风险确认后查看收款方式并付款;逾期未付订单将进入超时流程。`, { templateKey: 'dp_pending_accept_accepted', params: { hours: windowHours } });
+        return void res.json({ success: true, status: 'direct_pay_window' });
+    });
+    // 卖家谢绝(无法发货/物流不可达等;理由可选,买家可见)→ 无责取消 + 回补库存
+    app.post('/api/orders/:id/pending-accept/decline', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const order = await loadPendingOrder(req, res);
+        if (!order)
+            return;
+        if (order.seller_id !== user.id)
+            return void errorRes(res, 403, 'NOT_ORDER_SELLER', '只有订单卖家可谢绝');
+        const reason = typeof req.body?.reason === 'string' ? req.body.reason.trim().slice(0, 200) : '';
+        try {
+            db.transaction(() => {
+                const t = transition(db, order.id, 'cancelled', user.id, [], `卖家谢绝接单(付款前,无责取消)${reason ? `:${reason}` : ''}`);
+                if (!t.success)
+                    throw new Error(t.error || 'TRANSITION_FAILED');
+                restorePreShipDirectPayStock(db, { fromStatus: 'pending_accept', productId: order.product_id, quantity: Number(order.quantity) || 1 });
+            })();
+        }
+        catch (e) {
+            return void errorRes(res, 409, 'DECLINE_FAILED', e.message);
+        }
+        notify(order.buyer_id, order.id, 'direct_pay_accept_declined', '❌ 卖家未能接单,订单已取消', `卖家未能确认发货${reason ? `(${reason})` : ''}。订单已无责取消 —— 你尚未付款,无需任何操作;双方信誉均不受影响。`, { templateKey: 'dp_pending_accept_declined', params: { reason } });
+        return void res.json({ success: true, status: 'cancelled' });
+    });
+    // ── 询价握手(PR-3,模板外地区)──────────────────────────────────────────
+    // 卖家报价:运费+预计时效(+备注,买家可见)。只能加"运费"一个科目,不能动货款单价(防坐地起价披运费皮);
+    //   货款+运费受【建单快照】单笔上限约束(cap 是买家最大裸损口径,必须含运费;用快照防事后调参绕过)。
+    //   可重复报价(买家确认前修正);每次报价重置响应窗(param direct_pay.quote_confirm_hours,默认 48h)。
+    app.post('/api/orders/:id/pending-accept/quote', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const order = await loadPendingOrder(req, res);
+        if (!order)
+            return;
+        if (order.seller_id !== user.id)
+            return void errorRes(res, 403, 'NOT_ORDER_SELLER', '只有订单卖家可报价');
+        if (Number(order.shipping_quote_required) !== 1)
+            return void errorRes(res, 409, 'NOT_QUOTE_ORDER', '本单不需询价(模板已覆盖或走普通接单)');
+        const fee = Number(req.body?.shipping_fee);
+        if (!Number.isFinite(fee) || fee < 0 || fee > 1_000_000)
+            return void errorRes(res, 400, 'BAD_QUOTE_FEE', '运费必须是 0~1000000 的数字');
+        const feeR = Math.round(fee * 100) / 100;
+        const cap = Number(order.direct_pay_per_tx_cap_units_snapshot);
+        if (Number.isFinite(cap) && cap > 0 && toUnits(Number(order.total_amount)) + toUnits(feeR) > cap) {
+            return void errorRes(res, 409, 'QUOTE_EXCEEDS_CAP', `货款+运费超出本单单笔上限(${toDecimal(cap)} USDC),不能以运费形式突破小额直付边界`);
+        }
+        const est = req.body?.est_days == null ? null : String(req.body.est_days).trim().slice(0, 20) || null;
+        const note = req.body?.note == null ? null : String(req.body.note).trim().slice(0, 200) || null;
+        const confirmHours = Math.max(1, Number(getProtocolParam('direct_pay.quote_confirm_hours', 48)) || 48);
+        await dbRun(`UPDATE orders SET shipping_quote_fee = ?, shipping_quote_est_days = ?, shipping_quote_note = ?, shipping_quote_at = datetime('now'), pending_accept_deadline = ? WHERE id = ? AND status = 'pending_accept'`, [feeR, est, note, new Date(Date.now() + confirmHours * 3600_000).toISOString(), order.id]);
+        notify(order.buyer_id, order.id, 'direct_pay_quote_submitted', '📦 卖家已报价运费,请确认', `卖家确认可发货并报价:运费 ${feeR} USDC${est ? `,预计时效 ${est} 天` : ''}${note ? `(${note})` : ''}。新总额 ${Math.round((Number(order.total_amount) + feeR) * 100) / 100} USDC。请在 ${confirmHours} 小时内确认(确认后进入付款环节)或撤单;逾期订单自动取消。`, { templateKey: 'dp_quote_submitted', params: { fee: feeR, est: est ?? '', note: note ?? '', total: Math.round((Number(order.total_amount) + feeR) * 100) / 100, hours: confirmHours } });
+        return void res.json({ success: true, shipping_quote_fee: feeR, est_days: est, new_total: Math.round((Number(order.total_amount) + feeR) * 100) / 100 });
+    });
+    // 买家确认报价 → 运费并入 total_amount(整数 units 精确加)+ 快照三列 + 重建 payable 参考换算 → 进付款窗。
+    //   CAS:仅 pending_accept 且已报价;总额变更与状态转移同一 db.transaction(要么全生效要么全回滚)。
+    app.post('/api/orders/:id/pending-accept/confirm-quote', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const order = await loadPendingOrder(req, res);
+        if (!order)
+            return;
+        if (order.buyer_id !== user.id)
+            return void errorRes(res, 403, 'NOT_ORDER_BUYER', '只有订单买家可确认报价');
+        if (Number(order.shipping_quote_required) !== 1 || order.shipping_quote_fee == null)
+            return void errorRes(res, 409, 'QUOTE_NOT_SUBMITTED', '卖家尚未报价,不可确认');
+        const feeR = Number(order.shipping_quote_fee);
+        const newTotal = toDecimal(toUnits(Number(order.total_amount)) + toUnits(feeR));
+        const windowHours = Math.max(1, Number(getProtocolParam('direct_pay.payment_window_hours', 4)) || 4);
+        // payable 参考换算按新总额重建(display-only;账户快照缺失/坏 JSON → 保持原样,零阻断)
+        let snapJson = order.direct_pay_account_snapshot;
+        try {
+            if (snapJson) {
+                const snap = JSON.parse(snapJson);
+                snapJson = JSON.stringify({ ...snap, ...buildPayableSnapshot(newTotal, snap.currency ?? null) });
+            }
+        }
+        catch {
+            snapJson = order.direct_pay_account_snapshot;
+        }
+        try {
+            db.transaction(() => {
+                const u = db.prepare(`UPDATE orders SET total_amount = ?, shipping_fee = ?, shipping_est_days = ?, direct_pay_account_snapshot = ?, direct_pay_window_deadline = ? WHERE id = ? AND status = 'pending_accept' AND shipping_quote_fee IS NOT NULL`)
+                    .run(newTotal, feeR, order.shipping_quote_est_days, snapJson, new Date(Date.now() + windowHours * 3600_000).toISOString(), order.id);
+                if (u.changes !== 1)
+                    throw new Error('QUOTE_CONFIRM_RACE');
+                const t = transition(db, order.id, 'direct_pay_window', 'sys_protocol', [], `买家确认运费报价(${feeR} USDC,新总额 ${newTotal})→ 进入直付付款窗口`);
+                if (!t.success)
+                    throw new Error(t.error || 'TRANSITION_FAILED');
+            })();
+        }
+        catch (e) {
+            return void errorRes(res, 409, 'QUOTE_CONFIRM_FAILED', e.message);
+        }
+        // 总额变更后补跑 AML 监控(fail-soft,绝不回流为失败);条款快照补记运费裁决(quote_pending→quote)
+        safeRunDirectPayAmlMonitor(db, { sellerId: order.seller_id, orderId: order.id, nowIso: new Date().toISOString(), getProtocolParam });
+        updateSnapshotShippingQuote(db, order.id, feeR, order.shipping_quote_est_days ?? null);
+        notify(order.seller_id, order.id, 'direct_pay_quote_confirmed', '✅ 买家已确认运费报价', `买家已确认新总额 ${newTotal} USDC(含运费 ${feeR}),订单进入付款窗口。买家完成场外付款并标记后你会收到发货提醒。`, { templateKey: 'dp_quote_confirmed', params: { total: newTotal, fee: feeR } });
+        return void res.json({ success: true, status: 'direct_pay_window', total_amount: newTotal });
+    });
+    // 买家撤单(接单前反悔)→ 无责取消 + 回补库存
+    app.post('/api/orders/:id/pending-accept/cancel', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const order = await loadPendingOrder(req, res);
+        if (!order)
+            return;
+        if (order.buyer_id !== user.id)
+            return void errorRes(res, 403, 'NOT_ORDER_BUYER', '只有订单买家可撤单');
+        try {
+            db.transaction(() => {
+                const t = transition(db, order.id, 'cancelled', user.id, [], '买家在卖家接单前撤单(付款前,无责取消)');
+                if (!t.success)
+                    throw new Error(t.error || 'TRANSITION_FAILED');
+                restorePreShipDirectPayStock(db, { fromStatus: 'pending_accept', productId: order.product_id, quantity: Number(order.quantity) || 1 });
+            })();
+        }
+        catch (e) {
+            return void errorRes(res, 409, 'CANCEL_FAILED', e.message);
+        }
+        notify(order.seller_id, order.id, 'direct_pay_accept_cancelled', '↩️ 买家已撤单', '买家在你确认接单前撤回了订单。订单已无责取消,库存已恢复。', { templateKey: 'dp_pending_accept_cancelled', params: {} });
+        return void res.json({ success: true, status: 'cancelled' });
+    });
+}

package/dist/pwa/routes/direct-pay-returns.js

@@ -0,0 +1,74 @@
+import { markReturnRefunded, confirmReturnRefundReceived } from '../../direct-pay-returns.js';
+import { requireDirectPayHumanPasskey } from '../direct-pay-guards.js';
+import { recordRepEvent } from '../../layer4-economics/L4-3-reputation/reputation-engine.js';
+import { createNotification } from '../../layer2-business/L2-6-notifications/notification-engine.js';
+import { dbOne } from '../../layer0-foundation/L0-1-database/db.js';
+export function registerDirectPayReturnsRoutes(app, deps) {
+    const { db, auth, generateId, errorRes, consumeGateToken } = deps;
+    const httpFor = (code) => code === 'RETURN_NOT_FOUND' ? 404
+        : code === 'NOT_ORDER_BUYER' || code === 'NOT_ORDER_SELLER' ? 403
+            : 409;
+    const notify = (userId, orderId, type, title, body) => {
+        try {
+            createNotification(db, userId, orderId, type, title, body);
+        }
+        catch { /* 通知失败不阻断业务 */ }
+    };
+    app.post('/api/return-requests/:id/mark-refunded', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const refundReference = typeof req.body?.refund_reference === 'string' ? req.body.refund_reference : null;
+        const r = markReturnRefunded(db, { returnId: req.params.id, sellerId: user.id, refundReference, messageId: generateId('rmsg') });
+        if (!r.ok)
+            return void errorRes(res, httpFor(r.error_code), r.error_code || 'RETURN_MARK_REFUNDED_ERROR', r.error || '声明退款失败');
+        const rr = await dbOne('SELECT buyer_id, order_id FROM return_requests WHERE id = ?', [req.params.id]);
+        if (rr)
+            notify(rr.buyer_id, rr.order_id, 'direct_pay_return_refund_marked', '💸 卖家已声明退货退款', `卖家声明已在协议外向你退款${refundReference ? `(退款参考:${String(refundReference).slice(0, 80)})` : ''}。请核实到账后在订单页确认(需 Passkey),退货即完成;若未收到退款请勿确认,可发起争议。`);
+        return void res.json({ success: true, status: r.status });
+    });
+    app.post('/api/return-requests/:id/confirm-refund', async (req, res) => {
+        const user = auth(req, res);
+        if (!user)
+            return;
+        const uid = user.id;
+        // 只读预检(不消费一次性 Passkey token):必须是本人 buyer 的 refund_marked 直付退货
+        const pre = await dbOne('SELECT r.buyer_id, r.status, r.order_id, o.payment_rail FROM return_requests r JOIN orders o ON o.id = r.order_id WHERE r.id = ?', [req.params.id]);
+        if (!pre)
+            return void errorRes(res, 404, 'RETURN_NOT_FOUND', '退货请求不存在');
+        if (pre.buyer_id !== uid)
+            return void errorRes(res, 403, 'NOT_ORDER_BUYER', '只有订单买家可确认收到退款');
+        if (pre.payment_rail !== 'direct_p2p' || pre.status !== 'refund_marked') {
+            return void errorRes(res, 409, 'REFUND_NOT_MARKED', '当前不可确认(卖家尚未声明退款,或非直付退货)');
+        }
+        // RISK 门:确认收款并终结退货 = 终局动作 → 现场真人 Passkey(agent 无 Passkey 硬拒)
+        const gate = requireDirectPayHumanPasskey({ db, consumeGateToken }, {
+            userId: uid, webauthnToken: req.body?.webauthn_token, purpose: 'direct_pay_order_action',
+            validate: (data) => { const d = data; return !!d && d.order_id === pre.order_id && d.action === 'return_refund_confirm'; },
+        });
+        if (!gate.ok)
+            return void errorRes(res, 403, gate.error_code || 'HUMAN_PRESENCE_REQUIRED', gate.reason || '需现场真人 Passkey 确认');
+        let r;
+        try {
+            // CAS 终态翻转 + 全额退款社交计数 -1,同一原子边界(零资金零库存)
+            r = db.transaction(() => confirmReturnRefundReceived(db, { returnId: req.params.id, buyerId: uid, messageId: generateId('rmsg') }))();
+        }
+        catch (e) {
+            return void errorRes(res, 409, 'RETURN_CONFIRM_FAILED', e.message);
+        }
+        if (!r.ok)
+            return void errorRes(res, httpFor(r.error_code), r.error_code || 'RETURN_CONFIRM_ERROR', r.error || '确认失败');
+        // 卖家过错原因 → rep event(与 escrow executeReturnRefund 同口径,tx 外 best-effort)
+        try {
+            if (r.seller_fault_reason && r.seller_id) {
+                recordRepEvent(db, r.seller_id, 'claim_upheld_against', `退货接受 (reason=${r.seller_fault_reason}, return=${req.params.id})`, r.order_id || undefined);
+            }
+        }
+        catch (e) {
+            console.error('[dp return rep event]', e);
+        }
+        if (r.seller_id && r.order_id)
+            notify(r.seller_id, r.order_id, 'direct_pay_return_settled', '✅ 退货已完成', '买家已确认收到场外退款,退货流程结束。提示:退回货物须经验收后方可重新上架(库存不会自动恢复)。');
+        return void res.json({ success: true, status: r.status });
+    });
+}

package/dist/pwa/routes/direct-pay-timeouts.js

@@ -0,0 +1,248 @@
+import { transition } from '../../layer0-foundation/L0-2-state-machine/engine.js';
+import { releaseFeeStake } from '../../direct-pay-ledger.js';
+import { restorePreShipDirectPayStock } from '../../direct-pay-stock.js'; // D3 库存回补唯一入口(pre-ship 放行;已出库拒绝)
+import { notifyTransition, createNotification } from '../../layer2-business/L2-6-notifications/notification-engine.js';
+import { expireDeferrals, listExpiringDeferrals, markDeferralReminded, suspendPrivilegeOnDeferralExpiry } from '../../direct-receive-deferral.js'; // B4:缓交到期提醒/收口
+const SYS = 'sys_protocol';
+/** 货款协商买家申诉窗(天),governance 可调,默认 7d。与 request_cancel 同源 param,保证手动/自动一致。 */
+function recourseDays(db) {
+    try {
+        const row = db.prepare("SELECT value FROM protocol_params WHERE key = 'direct_pay.payment_query_recourse_days'").get();
+        const n = Number(row?.value ?? 7);
+        return Number.isFinite(n) && n > 0 ? Math.max(1, n) : 7;
+    }
+    catch {
+        return 7;
+    }
+}
+/** 宽限期(小时),governance 可调,默认 48h(2d)。不硬编码。 */
+function graceHours(db) {
+    try {
+        const row = db.prepare("SELECT value FROM protocol_params WHERE key = 'direct_pay.grace_hours'").get();
+        const n = Number(row?.value ?? 48);
+        return Number.isFinite(n) && n > 0 ? n : 48;
+    }
+    catch {
+        return 48;
+    } // param 表缺失/读失败 → 安全默认,cron 不崩
+}
+export function runDirectPayTimeoutSweep(deps) {
+    const { db } = deps;
+    const gh = graceHours(db);
+    const windowExpired = [];
+    const graceCancelled = [];
+    const pqRecourseOpened = [];
+    const pqCancelled = [];
+    const acceptExpired = [];
+    const deferralReminded = [];
+    const deferralExpired = [];
+    // F. 缓交收口(B4):① 到期前提醒(param direct_pay.deferral_reminder_days,默认 3d;reminder_sent_at 去重)
+    //    ② 过 grace 到期 → expired + 无生产 bond 则停权(有 bond=已缴清兜底不停)+ 通知。均 fail-soft 不断 cron。
+    try {
+        const remindDays = (() => { try {
+            const r = db.prepare("SELECT value FROM protocol_params WHERE key = 'direct_pay.deferral_reminder_days'").get();
+            const n = Number(r?.value ?? 3);
+            return Number.isFinite(n) && n > 0 ? n : 3;
+        }
+        catch {
+            return 3;
+        } })();
+        for (const d of listExpiringDeferrals(db, new Date().toISOString(), remindDays)) {
+            markDeferralReminded(db, d.id);
+            deferralReminded.push(d.id);
+            try {
+                createNotification(db, d.user_id, null, 'deferral_expiring_soon', '⏰ 保证金缓交即将到期', `你的缓交资格将于 ${d.expires_at} 到期。请在到期前缴纳履约保证金转正式(设置页-直付履约保证金),否则宽限期后直付资格将关闭。`, { templateKey: 'deferral_expiring_soon', params: { expires: d.expires_at } });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify deferral-remind:', e.message);
+            }
+        }
+        for (const uid of expireDeferrals(db, new Date().toISOString()).expired) {
+            const suspended = suspendPrivilegeOnDeferralExpiry(db, uid);
+            deferralExpired.push(uid);
+            try {
+                createNotification(db, uid, null, 'deferral_expired', '🚫 保证金缓交已到期', suspended ? '缓交资格已到期且未缴纳保证金,直付资格已关闭。缴纳履约保证金并经运营确认后可重新开通;在途订单不受影响,请正常履约完成。' : '缓交资格已到期;你已缴纳保证金,直付资格不受影响。', { templateKey: 'deferral_expired', params: { closed: suspended ? 1 : 0 } });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify deferral-expired:', e.message);
+            }
+        }
+    }
+    catch (e) {
+        console.error('[direct-pay-timeouts] deferral closure sweep:', e);
+    }
+    // E. 手动接单窗超时(v16):pending_accept 过 pending_accept_deadline → 无责取消 + 回补库存。
+    //    零资金(此阶段没人付过钱 —— 时序门);双方通知。WHERE 硬门:仅 now > deadline 命中。
+    const acceptRows = db.prepare(`
+    SELECT id, product_id, quantity, buyer_id, seller_id FROM orders
+    WHERE status = 'pending_accept'
+      AND payment_rail = 'direct_p2p'
+      AND pending_accept_deadline IS NOT NULL
+      AND datetime(pending_accept_deadline) < datetime('now')
+    LIMIT 1000
+  `).all();
+    for (const { id, product_id, quantity, buyer_id, seller_id } of acceptRows) {
+        let done = false;
+        db.transaction(() => {
+            const r = transition(db, id, 'cancelled', SYS, [], '手动接单:卖家超时未确认接单,系统无责取消(付款前,零资金)');
+            if (!r.success)
+                return;
+            restorePreShipDirectPayStock(db, { fromStatus: 'pending_accept', productId: product_id, quantity });
+            acceptExpired.push(id);
+            done = true;
+        })();
+        if (done) {
+            try {
+                createNotification(db, buyer_id, id, 'direct_pay_accept_expired', '⏰ 卖家超时未接单,订单已取消', '卖家未在接单窗口内确认,订单已自动取消 —— 你尚未付款,无需任何操作。可换商品或联系卖家后重新下单。', { templateKey: 'dp_pending_accept_expired_buyer', params: {} });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify accept-expired buyer:', e.message);
+            }
+            try {
+                createNotification(db, seller_id, id, 'direct_pay_accept_expired', '⏰ 订单因超时未接单已取消', '你未在接单窗口内确认接单,订单已自动取消,库存已恢复。频繁超时会影响买家体验,可考虑改用自动接单或缩短响应时间。', { templateKey: 'dp_pending_accept_expired_seller', params: {} });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify accept-expired seller:', e.message);
+            }
+        }
+    }
+    // A. 付款窗口超时 → 可争议态(非静默关单)+ 退费用质押 + 设宽限期
+    const windowRows = db.prepare(`
+    SELECT id, buyer_id FROM orders
+    WHERE status = 'direct_pay_window'
+      AND payment_rail = 'direct_p2p'
+      AND direct_pay_window_deadline IS NOT NULL
+      AND datetime(direct_pay_window_deadline) < datetime('now')
+    LIMIT 1000
+  `).all();
+    for (const { id, buyer_id } of windowRows) {
+        let done = false;
+        db.transaction(() => {
+            const r = transition(db, id, 'direct_expired_unconfirmed', SYS, [], 'Rail1 直付:付款窗口超时未标记');
+            if (!r.success)
+                return;
+            releaseFeeStake(db, { orderId: id }); // 费用质押退卖家(无完成,不收费)
+            db.prepare(`UPDATE orders SET direct_grace_deadline = datetime('now', ?) WHERE id = ?`).run(`+${gh} hours`, id);
+            windowExpired.push(id);
+            done = true;
+        })();
+        // 审计项 B(N2):此前窗口静默过期,卡点付款的买家毫不知情直到 48h 后自动取消。tx 外 fail-soft。
+        if (done) {
+            try {
+                createNotification(db, buyer_id, id, 'direct_pay_window_expired', '⏰ 直付付款窗口已过期', `若你已付款:请在 ${gh} 小时宽限期内到订单页提交付款凭证发起争议;未付款可直接关闭订单,否则宽限期满将自动取消。`, { templateKey: 'dp_window_expired', params: { graceHours: gh } });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify window-expired:', e.message);
+            }
+        }
+    }
+    // B. 宽限期满 → 系统关单(★ WHERE 保证仅 now>grace 命中;宽限期内绝不关,买家 →disputed 全程可用)
+    const graceRows = db.prepare(`
+    SELECT id, product_id, quantity, buyer_id, seller_id FROM orders
+    WHERE status = 'direct_expired_unconfirmed'
+      AND payment_rail = 'direct_p2p'
+      AND direct_grace_deadline IS NOT NULL
+      AND datetime(direct_grace_deadline) < datetime('now')
+    LIMIT 1000
+  `).all();
+    for (const { id, product_id, quantity, buyer_id, seller_id } of graceRows) {
+        let done = false;
+        db.transaction(() => {
+            const r = transition(db, id, 'cancelled', SYS, [], 'Rail1 直付:宽限期满,买家未付款/未升级争议,系统关单');
+            if (!r.success)
+                return;
+            restorePreShipDirectPayStock(db, { fromStatus: 'direct_expired_unconfirmed', productId: product_id, quantity }); // D3 回补(pre-ship 唯一入口)
+            graceCancelled.push(id);
+            done = true;
+        })();
+        // 审计项 B(N2):自动关单也要告知双方(此前静默,买家不知单没了、卖家不知库存已回)。tx 外 fail-soft。
+        if (done) {
+            try {
+                createNotification(db, buyer_id, id, 'direct_pay_grace_cancelled', '🚫 直付订单已自动取消', '付款窗口与宽限期均已过且未收到你的付款标记/凭证,订单已关闭。若你确已付款,请通过订单页联系卖家协商。', { templateKey: 'dp_grace_cancelled_buyer', params: {} });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify grace-cancel buyer:', e.message);
+            }
+            try {
+                createNotification(db, seller_id, id, 'direct_pay_grace_cancelled', '🚫 直付订单已自动取消(买家未付款)', '买家未在付款窗口+宽限期内付款,订单已自动关闭,库存已恢复。', { templateKey: 'dp_grace_cancelled_seller', params: {} });
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify grace-cancel seller:', e.message);
+            }
+        }
+    }
+    // D. 货款协商买家静默:payment_query 已过买家响应宽限(payment_query_deadline)且卖家未手动请求取消
+    //    (payment_query_cancel_deadline 仍空)→ 系统【代卖家自动启动取消申请】(等价 request_cancel):
+    //    设 payment_query_cancel_deadline = now + recourse_days + 通知买家最后申诉窗已开。★ 不关单、不动状态、不涉资金;
+    //    买家窗内仍可 pq_escalate 主张已付,订单离开 payment_query 后本 sweep 与 Sweep C 均不再命中。之后由 Sweep C 窗满关单。
+    //    幂等:WHERE payment_query_cancel_deadline IS NULL —— 卖家已手动 request_cancel 的单不被重置,重复 cron 也不刷新窗口。
+    const rd = recourseDays(db);
+    const pqSilentRows = db.prepare(`
+    SELECT id, buyer_id FROM orders
+    WHERE status = 'payment_query'
+      AND payment_rail = 'direct_p2p'
+      AND payment_query_deadline IS NOT NULL
+      AND datetime(payment_query_deadline) < datetime('now')
+      AND payment_query_cancel_deadline IS NULL
+    LIMIT 1000
+  `).all();
+    for (const { id, buyer_id } of pqSilentRows) {
+        const res = db.prepare(`UPDATE orders SET payment_query_cancel_deadline = datetime('now', ?) WHERE id = ? AND payment_query_cancel_deadline IS NULL`).run(`+${rd} days`, id);
+        if (res.changes === 0)
+            continue; // 竞态:同 tick 已被设(卖家 request_cancel)——不重复处理
+        pqRecourseOpened.push(id);
+        try {
+            const dl = db.prepare("SELECT payment_query_cancel_deadline d FROM orders WHERE id = ?").get(id).d;
+            createNotification(db, buyer_id, id, 'payment_query_cancel_requested', '⏳ 卖家申请取消订单', `卖家称未收到货款且你未在响应期内回应,系统已代卖家发起取消。你约有 ${rd} 天:若确已付款请提供付款参考或发起举证(pq_escalate),否则订单将于 ${dl} 自动取消。直付非托管,无平台退款。`);
+        }
+        catch (e) {
+            console.warn('[direct-pay-timeouts] notify pq-recourse:', e.message);
+        }
+    }
+    // C. 货款协商:卖家已请求取消(payment_query_cancel_deadline 已设)+ 买家申诉窗满 → 系统关单 + 退费用质押。
+    //    ★ 窗内(now < deadline)绝不关:买家全程可主张已付/升级举证(pq_escalate 回 disputed)。
+    const pqCancelRows = db.prepare(`
+    SELECT id, product_id, quantity FROM orders
+    WHERE status = 'payment_query'
+      AND payment_rail = 'direct_p2p'
+      AND payment_query_cancel_deadline IS NOT NULL
+      AND datetime(payment_query_cancel_deadline) < datetime('now')
+    LIMIT 1000
+  `).all();
+    for (const { id, product_id, quantity } of pqCancelRows) {
+        let done = false;
+        db.transaction(() => {
+            const r = transition(db, id, 'cancelled', SYS, [], 'Rail1 直付:货款协商申诉窗满,买家未回应/未升级,系统关单');
+            if (!r.success)
+                return;
+            releaseFeeStake(db, { orderId: id }); // 无完成不收费:退卖家费用质押
+            restorePreShipDirectPayStock(db, { fromStatus: 'payment_query', productId: product_id, quantity }); // D3 回补(pre-ship 唯一入口)
+            done = true;
+        })();
+        if (done) {
+            pqCancelled.push(id);
+            try {
+                notifyTransition(db, id, 'payment_query', 'cancelled');
+            }
+            catch (e) {
+                console.warn('[direct-pay-timeouts] notify pq-cancel:', e.message);
+            }
+        } // 通知买卖双方(cron 系统关单也要发,route 之外)
+    }
+    return { windowExpired, graceCancelled, pqRecourseOpened, pqCancelled, acceptExpired, deferralReminded, deferralExpired };
+}
+export function startDirectPayTimeoutCron(deps) {
+    const ms = 10 * 60 * 1000; // 10min — 付款窗口最短 30min,10min 粒度足够
+    setInterval(() => {
+        try {
+            const r = runDirectPayTimeoutSweep(deps);
+            if (r.windowExpired.length || r.graceCancelled.length || r.pqRecourseOpened.length || r.pqCancelled.length || r.acceptExpired.length || r.deferralReminded.length || r.deferralExpired.length) {
+                console.log(`[direct-pay-timeouts] window→expired ${r.windowExpired.length}, grace→cancelled ${r.graceCancelled.length}, pq→recourse ${r.pqRecourseOpened.length}, pq→cancelled ${r.pqCancelled.length}, accept→expired ${r.acceptExpired.length}, deferral remind/expired ${r.deferralReminded.length}/${r.deferralExpired.length}`);
+            }
+        }
+        catch (e) {
+            console.error('[direct-pay-timeouts-cron]', e);
+        }
+    }, ms);
+    console.log('⏳ Direct Pay (Rail 1) 超时 cron 已启动 (每 10min:付款窗口超时 + 宽限关单)');
+}